$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/YcPnry1nWwB6PP9pJirhuIjqW-g.roa File: YcPnry1nWwB6PP9pJirhuIjqW-g.roa (raw, json) Hash identifier: 5M8RpAGqTPq5dz6xVs842H2lc5hDudlnSJyT0kRmqYI= Subject key identifier: 61:C3:E7:AF:2D:67:5B:00:7A:3C:FF:69:26:2A:E1:B8:88:EA:5B:E8 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0BBB Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/YcPnry1nWwB6PP9pJirhuIjqW-g.roa Signing time: Fri 01 Sep 2023 08:36:39 +0000 ROA not before: Fri 01 Sep 2023 08:36:39 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9244 IP address blocks: 61.56.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3003 (0xbbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Sep 1 08:36:39 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=61C3E7AF2D675B007A3CFF69262AE1B888EA5BE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d4:c8:31:29:81:9e:a3:4b:66:e9:0a:c6:b2: d8:b4:03:f0:a2:02:29:09:c5:36:34:78:ff:4c:2f: ee:18:aa:2a:9c:b6:09:4d:40:97:06:7f:b8:68:ef: de:5c:9d:a9:b4:67:73:96:22:29:0c:3a:c7:68:93: f0:80:79:08:45:bf:fe:71:1c:64:fe:f2:35:ab:6d: 23:f2:02:78:de:00:41:67:dd:9c:68:a1:b4:39:52: f2:92:2a:33:73:1b:ae:2e:ae:2a:d4:51:bb:d8:e6: 18:25:6f:56:4c:69:c7:76:f7:e2:2d:6a:b0:2a:a0: 08:da:87:c3:72:1c:70:0a:33:14:74:f7:b8:2a:75: 07:13:f0:0a:f5:44:07:29:e8:e9:61:c0:fa:ac:6b: 3f:25:1a:42:d5:fe:8c:4e:8c:11:4f:da:eb:64:ad: e8:56:04:d6:6b:79:76:ea:8f:80:f5:ea:80:ec:f9: cf:08:14:71:3e:cf:ce:e2:01:77:22:e8:63:aa:e4: a4:19:df:0d:ba:78:6a:c3:eb:5a:8a:9b:be:5f:58: 54:2d:06:a4:73:18:1f:aa:af:23:2e:14:cd:59:3e: c8:20:61:0b:2a:fd:57:71:0e:dc:17:a0:12:47:2c: f6:fc:86:be:c9:35:4e:a8:c8:21:7a:64:a6:b1:0d: 0b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C3:E7:AF:2D:67:5B:00:7A:3C:FF:69:26:2A:E1:B8:88:EA:5B:E8 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/YcPnry1nWwB6PP9pJirhuIjqW-g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.80.0/20 Signature Algorithm: sha256WithRSAEncryption 38:89:c1:23:ec:62:33:e1:f4:75:83:f7:9a:56:99:cc:c0:31: 81:80:94:be:00:01:c1:75:7d:31:b0:48:dd:b0:71:99:26:f2: 0e:6d:e8:a0:ca:00:b9:a4:b7:a2:8a:2f:ed:c0:81:64:c1:b6: cf:52:93:1c:7a:82:36:45:f6:74:a5:7b:47:13:02:f0:9e:46: 83:fa:df:44:68:00:b4:b3:55:28:14:a4:ff:62:50:15:5e:db: dc:a3:98:83:3e:ce:3a:b5:78:aa:4b:5e:66:d0:de:f5:e5:12: c4:cc:41:f2:7f:10:51:5b:e1:d5:24:a0:a5:ae:03:eb:31:67: 69:28:06:8a:06:c7:ac:ae:c7:ad:73:04:d4:43:33:88:13:a1: c8:00:4f:02:72:30:f0:4e:2c:21:14:08:b0:18:d8:c3:53:88: 73:46:82:0d:60:8c:5b:54:d0:92:c4:9e:be:dd:11:f2:b9:67: 9e:a4:3e:26:4b:31:08:c3:62:e8:25:9c:4c:43:a8:69:19:ce: 0d:0e:f4:c4:06:15:a5:90:46:c8:a6:96:aa:b4:31:ae:5e:cd: dc:3f:5e:c2:50:59:26:a2:03:21:82:13:87:83:c3:43:51:86: ae:07:d3:45:1a:66:6f:d9:9c:36:3c:c1:1b:d1:88:3f:66:13: e4:2b:c0:26 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICC7swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yMzA5MDEw ODM2MzlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDYxQzNFN0FGMkQ2NzVC MDA3QTNDRkY2OTI2MkFFMUI4ODhFQTVCRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI1MgxKYGeo0tm6QrGsti0A/CiAikJxTY0eP9ML+4YqiqctglN QJcGf7ho795cnam0Z3OWIikMOsdok/CAeQhFv/5xHGT+8jWrbSPyAnjeAEFn3Zxo obQ5UvKSKjNzG64urirUUbvY5hglb1ZMacd29+ItarAqoAjah8NyHHAKMxR097gq dQcT8Ar1RAcp6OlhwPqsaz8lGkLV/oxOjBFP2utkrehWBNZreXbqj4D16oDs+c8I FHE+z87iAXci6GOq5KQZ3w26eGrD61qKm75fWFQtBqRzGB+qryMuFM1ZPsggYQsq /VdxDtwXoBJHLPb8hr7JNU6oyCF6ZKaxDQsFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYcPnry1nWwB6PP9pJirhuIjqW+gwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL1ljUG5yeTFuV3dCNlBQOXBK aXJodUlqcVctZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 OFAwDQYJKoZIhvcNAQELBQADggEBADiJwSPsYjPh9HWD95pWmczAMYGAlL4AAcF1 fTGwSN2wcZkm8g5t6KDKALmkt6KKL+3AgWTBts9Skxx6gjZF9nSle0cTAvCeRoP6 30RoALSzVSgUpP9iUBVe29yjmIM+zjq1eKpLXmbQ3vXlEsTMQfJ/EFFb4dUkoKWu A+sxZ2koBooGx6yux61zBNRDM4gTocgATwJyMPBOLCEUCLAY2MNTiHNGgg1gjFtU 0JLEnr7dEfK5Z56kPiZLMQjDYuglnExDqGkZzg0O9MQGFaWQRsimlqq0Ma5ezdw/ XsJQWSaiAyGCE4eDw0NRhq4H00UaZm/ZnDY8wRvRiD9mE+QrwCY= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:00 2024 by rpki-client on console-fra.rpki-client.org